Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vQMBnUG45ElC4oD6snu_dpSCgko.roa
File:                     vQMBnUG45ElC4oD6snu_dpSCgko.roa (raw, json)
Hash identifier:          4ex0YIHSbaOzjePRMFAWURdwbvt75dw/bpHVF8P6+7Y=
Subject key identifier:   BD:03:01:9D:41:B8:E4:49:42:E2:80:FA:B2:7B:BF:76:94:82:82:4A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       E6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vQMBnUG45ElC4oD6snu_dpSCgko.roa
Signing time:             Thu 28 Jul 2022 05:51:43 +0000
ROA not before:           Thu 28 Jul 2022 05:51:43 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        210.229.72.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:51:43 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=BD03019D41B8E44942E280FAB27BBF769482824A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:ae:f3:60:82:cc:68:69:f2:59:07:df:1d:
                    51:b0:6f:fb:2b:ab:c0:e8:56:53:6e:5e:69:1a:62:
                    a1:52:c4:28:22:14:d8:be:3b:b7:f8:82:c3:7a:fe:
                    8f:e0:af:e7:a0:05:e3:84:6a:b7:a0:09:cf:11:c4:
                    f3:b1:db:1e:a4:af:ad:06:c9:fa:f3:71:e8:4a:05:
                    6c:ee:44:75:9c:cb:7a:71:f7:03:e2:4d:bf:6b:5c:
                    c7:bc:cd:a5:dc:e0:c8:b2:a6:af:33:1a:79:58:4a:
                    70:70:30:34:be:62:3d:aa:b4:47:fc:ad:38:a5:38:
                    c0:b9:9c:f2:eb:1e:9c:9e:1a:f1:d2:6c:dd:71:aa:
                    90:5e:c9:da:5f:ca:43:c6:f7:a4:ca:21:1d:8d:8e:
                    00:fc:5b:36:1c:60:fb:fa:ed:0c:09:b3:29:71:65:
                    0f:02:3a:b0:e7:6c:ec:c2:53:79:21:41:68:6d:45:
                    9d:19:3d:14:eb:f5:59:f7:3e:19:55:2b:ae:e0:f8:
                    63:67:c2:6b:26:ae:e3:5f:18:51:f3:43:21:b3:12:
                    eb:bc:25:a2:ae:f8:a7:5e:8d:bb:77:f8:b5:8d:66:
                    9e:3c:7e:48:b0:a6:92:4c:69:7b:35:02:58:6f:68:
                    10:ff:e0:8c:87:6e:de:9b:4b:9f:bd:49:97:54:2c:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:03:01:9D:41:B8:E4:49:42:E2:80:FA:B2:7B:BF:76:94:82:82:4A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vQMBnUG45ElC4oD6snu_dpSCgko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:9a:99:dd:07:1e:51:e4:50:de:c4:51:fd:e3:51:f9:87:
         0a:82:17:0f:d1:f4:bf:77:62:4a:ed:99:d0:89:52:f3:75:5f:
         5d:07:78:56:85:99:36:6d:b1:11:57:a4:34:00:d1:fe:e6:9e:
         de:87:de:62:1f:08:1e:95:c8:5a:ad:15:fa:2c:a3:cc:b4:a7:
         72:20:15:d6:15:d8:0d:e7:c7:a3:69:bf:fb:05:09:fe:44:6a:
         62:fa:50:cb:bd:7a:16:e0:b2:c1:3e:97:58:14:b5:38:6e:24:
         92:2e:9d:40:59:02:1a:4f:b3:36:9f:a0:69:59:40:b4:b6:a6:
         df:55:fd:b7:ab:77:45:41:39:00:32:14:8d:bb:37:d5:c6:ae:
         9e:8a:2e:8e:01:d3:be:61:7b:9e:d2:ee:89:5d:b7:72:e7:ad:
         f0:9e:83:c6:3d:16:bd:ef:50:96:36:ba:f6:52:99:d4:ef:88:
         84:a7:bb:18:21:cd:22:21:ed:5d:56:38:25:a0:d2:3d:74:c4:
         88:1b:83:3b:ed:d0:b2:72:2b:d9:0e:8b:bd:55:a4:0c:e5:11:
         f4:e5:e2:1f:aa:b6:09:3b:1d:50:56:76:41:a0:ee:09:c6:bc:
         f7:2b:a9:41:a0:6f:70:d1:69:38:58:f7:1c:ee:43:b4:13:98:
         01:e5:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org